Cisco Securing the Web with Cisco Web Security Appliance

QUESTION NO: 1
What is used to configure WSA as an explicit proxy?

A. Network settings from user browser B. IP Spoofing from router C. WCCP redirection from firewall D. Auto redirection using PBR from switch

Correct Answer: A

QUESTION NO: 2
Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the right.

Correct Answer:

Explanation

You could use an explicit setting (browser config/PAC/WPAD) or transparent (WCCP/PBR) to point to the first proxy and then the first proxy will route based on category to one of the two upstream proxies based on your policy configuration.

QUESTION NO: 3
What is a benefit of integrating Cisco WSA with TrustSec in ISE?

A. Traffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a Cisco WSA B. ISE can block authentication for users who generate multiple sessions using suspect TCP ports C. Users in a specific SGT can be denied access to certain social websites. D. The policy trace tool can be used to match access policies using specific SGT

Correct Answer: C

QUESTION NO: 4
Which statement about Cisco Advanced Web Security Reporting integration is true?

A. AWSR can remove log files after they are indexed B. AWSR does not require a license to index data C. AWSR uses IP addresses to differentiate Cisco WSA deployments D. AWSR installation is CLI-based on Windows and Red Hat Linux systems

Correct Answer: D

QUESTION NO: 5
Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)

A. Block B. Decrypt C. Warn D. Pass Through E. Allow

Correct Answer: B,D

QUESTION NO: 6
What is needed to enable an HTTPS proxy?

A. trusted third-party CA signed root certificate B. self-signed CSR C. self-signed root certificate D. self-signed server certificate

Correct Answer: B

Cisco Securing the Web with Cisco Web Security Appliance - 300-725 Exam Questions